This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft File: k524p4YADCa65IN7bs2uD4q60bA.mft (raw, json) Hash identifier: bjHr/5sI4UqW6Ulmcf66kRmsyGZgmjR1VHUznK5ng0o= Subject key identifier: EE:D7:7B:92:6B:F0:DB:99:9B:A0:2E:28:37:01:A5:FF:4C:4D:80:46 Authority key identifier: 93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0 Certificate issuer: /CN=A91CDEB3/serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0 Certificate serial: 194D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft Manifest number: 192C Signing time: Sat 10 Jan 2026 16:13:14 +0000 Manifest this update: Sat 10 Jan 2026 16:13:14 +0000 Manifest next update: Sat 17 Jan 2026 16:13:14 +0000 Files and hashes: 1: k524p4YADCa65IN7bs2uD4q60bA.crl (hash: qP6w7gnpsl++mPOJzVxmktKrC9YCuD4PBZU8eBa4q5M=) 2: A6ACA298858911E88026B416C4F9AE02.roa (hash: KhZ44smvv0XMa3hY/4cdC4BTlTI2qU0P4EUvi2XPNs8=) 3: 5705E30EFC7A11E8BFCC760AC4F9AE02.roa (hash: RcpE2NmElWenIIwpxF/vjS3o5Nvaagq1xWJPPP3ACe8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 16:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6477 (0x194d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDEB3, serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0 Validity Not Before: Jan 10 16:13:14 2026 GMT Not After : Jan 17 16:13:14 2026 GMT Subject: CN=69627a9a-0f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8e:ff:b6:ea:a0:08:b8:88:b9:2c:f0:99:87: 1c:35:4b:91:59:34:6b:e8:23:d4:54:f2:38:fc:91: b9:ef:5c:dc:80:93:dc:f4:2c:aa:0c:be:42:af:81: c1:d3:9e:ef:2c:77:67:e7:01:8e:05:40:14:cb:8e: dd:9a:8b:19:e3:b8:de:4f:3f:30:d9:96:a8:00:c6: 25:73:fd:69:40:ed:d2:22:f9:68:5b:31:33:49:4d: 6b:2c:6a:75:a8:96:2c:c7:9e:5b:48:56:14:ab:ef: d4:41:b7:42:3a:54:96:7a:2d:8b:e5:78:d2:0b:d3: 46:f3:51:65:c5:dd:63:44:b2:f4:39:76:7b:d9:c5: b2:89:84:15:e6:57:2c:a0:8a:b1:db:9a:d6:78:07: f3:02:5d:28:59:00:4a:83:07:e8:50:49:ac:05:f7: 4b:d1:46:dc:68:88:c4:a5:cf:09:7c:fb:a3:93:6e: ec:8e:d7:6e:85:d8:09:b3:94:e6:bb:51:77:91:3b: 8c:cc:c1:3c:93:1a:17:92:4a:9a:aa:33:34:bd:fd: 63:a2:4b:49:05:88:22:26:a1:85:26:5b:8e:50:1f: 27:e8:4c:a5:2c:7c:fb:cf:d0:67:d4:6b:95:b1:22: e8:1d:27:f1:56:42:51:7c:d5:4b:a3:a4:f9:09:93: 56:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D7:7B:92:6B:F0:DB:99:9B:A0:2E:28:37:01:A5:FF:4C:4D:80:46 X509v3 Authority Key Identifier: keyid:93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:b7:e1:b8:c8:3f:8a:44:43:fe:0b:65:ad:6c:ed:d3:de:5a: a0:9a:53:fd:36:52:c9:2b:be:93:2f:d6:d3:6c:61:e8:d8:85: ae:0c:b1:cf:46:40:f7:29:c2:5c:ff:98:c1:e7:a4:55:85:94: 21:3c:88:92:cc:86:d2:a6:98:6b:8a:02:9a:99:ef:55:3c:d3: 56:b2:5b:a9:3e:b4:87:4a:15:fb:ed:e8:2b:fd:d0:e7:2e:77: 00:e1:5d:59:45:8c:df:9f:c7:19:9b:38:56:ad:6f:8e:75:ac: 8e:fd:19:5b:ed:b2:fa:44:7c:36:87:7d:68:78:40:83:c0:c4: 76:ef:70:ba:5c:b9:94:ad:9c:0b:30:66:04:ea:40:52:c1:27: 5b:65:83:18:72:55:38:33:6c:e8:53:3b:b7:a1:6b:f2:41:72: d8:92:ea:2c:c2:6e:9f:ce:21:bf:33:9b:de:0e:73:cc:c8:24: 48:fd:fd:5d:9e:95:b8:02:1a:79:0a:98:d9:e7:06:e8:e0:6a: c2:d9:74:99:fd:8e:96:00:50:2a:90:8b:94:c0:d2:f5:a4:8b: 08:37:52:0d:9e:0d:67:f0:3e:16:80:91:04:6e:0d:18:80:89: c8:67:32:f5:32:a9:31:73:19:ec:7d:51:04:12:07:80:ce:95: a7:d1:05:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RFQjMxMTAvBgNVBAUTKDkzOURCOEE3ODYwMDBDMjZCQUU0ODM3QjZFQ0RBRTBG OEFCQUQxQjAwHhcNMjYwMTEwMTYxMzE0WhcNMjYwMTE3MTYxMzE0WjAYMRYwFAYD VQQDDA02OTYyN2E5YS0wZjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo47/tuqgCLiIuSzwmYccNUuRWTRr6CPUVPI4/JG571zcgJPc9CyqDL5Cr4HB 057vLHdn5wGOBUAUy47dmosZ47jeTz8w2ZaoAMYlc/1pQO3SIvloWzEzSU1rLGp1 qJYsx55bSFYUq+/UQbdCOlSWei2L5XjSC9NG81Flxd1jRLL0OXZ72cWyiYQV5lcs oIqx25rWeAfzAl0oWQBKgwfoUEmsBfdL0UbcaIjEpc8JfPujk27sjtduhdgJs5Tm u1F3kTuMzME8kxoXkkqaqjM0vf1joktJBYgiJqGFJluOUB8n6EylLHz7z9Bn1GuV sSLoHSfxVkJRfNVLo6T5CZNWkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7Xe5Jr 8NuZm6AuKDcBpf9MTYBGMB8GA1UdIwQYMBaAFJOduKeGAAwmuuSDe27Nrg+KutGw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREVCMy81RDczNUQ0Njk2 REUxMUU3QkE3RDJBNzdDNEY5QUUwMi9rNTI0cDRZQURDYTY1SU43YnMydUQ0cTYw YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s1MjRwNFlBRENhNjVJTjdiczJ1RDRxNjBiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REVCMy81RDczNUQ0Njk2REUxMUU3QkE3RDJBNzdDNEY5QUUwMi9rNTI0cDRZQURD YTY1SU43YnMydUQ0cTYwYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjt+G4yD+KREP+C2WtbO3T3lqgmlP9NlLJK76TL9bTbGHo2IWuDLHP RkD3KcJc/5jB56RVhZQhPIiSzIbSpphrigKame9VPNNWslupPrSHShX77egr/dDn LncA4V1ZRYzfn8cZmzhWrW+OdayO/Rlb7bL6RHw2h31oeECDwMR273C6XLmUrZwL MGYE6kBSwSdbZYMYclU4M2zoUzu3oWvyQXLYkuoswm6fziG/M5veDnPMyCRI/f1d npW4Ahp5CpjZ5wbo4GrC2XSZ/Y6WAFAqkIuUwNL1pIsIN1INng1n8D4WgJEEbg0Y gInIZzL1MqkxcxnsfVEEEgeAzpWn0QUu -----END CERTIFICATE-----Generated at Sun Jan 11 17:52:18 2026 by rpki-client